wanckl
973c1b4f9a
fix(driver_twai): improve new driver API description
2025-12-23 16:10:01 +08:00
diplfranzhoepfinger
4f1cf6a5d2
chor(twai): improve error logging in _node_queue_tx function
...
Enhanced error message for unmatched dlc and buffer_len.
Merges https://github.com/espressif/esp-idf/pull/17888
2025-12-23 16:09:39 +08:00
Chen Jichang
3678a25e4c
fix(gdma): fix set dma burst size failure on p4 v3.0
2025-12-23 11:22:47 +08:00
Song Ruo Jing
d6fbe418c6
fix(ppa): fix SRM YUV422/420 incorrect DMA descriptor port mode block size
2025-12-22 16:09:06 +08:00
Song Ruo Jing
1b13ef0498
fix(ppa): fix potential SRM operation stuck on DMA issue
...
Apply a workaound to bypass macro block order function in PPA SRM
when specific conditions are met to avoid SRM operation getting stuck
2025-12-22 16:09:06 +08:00
Song Ruo Jing
507bea72e7
fix(ppa): YUV444 cannot be a PPA SRM output color mode
2025-12-22 16:09:06 +08:00
Jin Cheng
66b2214a0d
fix(bt/bluedroid): cleaned the code according to the tool cppcheck
2025-12-19 16:56:25 +08:00
Jin Cheng
cf5a568dc0
fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received
2025-12-19 16:52:31 +08:00
Jin Cheng
8fe4c35994
fix(bt/bluedroid): drop connection when atttempting to disable encryption
2025-12-19 16:52:31 +08:00
Jin Cheng
991486fa02
fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd
2025-12-19 16:52:31 +08:00
Jin Cheng
fa22e34f56
fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl
2025-12-19 16:52:31 +08:00
Jin Cheng
5872a8cccb
fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej
2025-12-19 16:52:31 +08:00
Jin Cheng
f7c0f92556
fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete
2025-12-19 16:52:31 +08:00
Jin Cheng
514bcb41a2
fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete
2025-12-19 16:52:31 +08:00
Jin Cheng
04219e5fd4
fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete
2025-12-19 16:52:31 +08:00
Jin Cheng
08a593d801
fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete
2025-12-19 16:52:31 +08:00
Jin Cheng
a73e2e4d6c
fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete
2025-12-19 16:52:31 +08:00
Jin Cheng
5a2b29fe82
fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute
2025-12-19 16:52:31 +08:00
Jin Cheng
3ec5f615ae
fix(bt/bluedroid): report failure when not able to connect to AVRCP
2025-12-19 16:52:31 +08:00
Jin Cheng
56756b1b5d
fix(bt/bluedroid): fixed buffer overflow in BRSF
2025-12-19 16:52:31 +08:00
Jin Cheng
11eea1b4de
fix(bt/bluedroid): added negative length check in process_service_search_rsp
2025-12-19 16:52:31 +08:00
Jin Cheng
be25062b0d
fix(bt/bluedroid): fixed OOB read in SDP server continuation length
2025-12-19 16:52:31 +08:00
Jin Cheng
4df287c536
fix(bt/bluedroid): added length check when copy AVDTP packet
2025-12-19 16:52:31 +08:00
Jin Cheng
6a497ad921
fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET
2025-12-19 16:52:31 +08:00
Jin Cheng
019516284f
fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item
2025-12-19 16:52:31 +08:00
Jin Cheng
158519cf8c
fix(bt/bluedroid): added boundary check when reading SDP attribute response packet
2025-12-19 16:52:31 +08:00
Jin Cheng
173747750d
fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp
2025-12-19 16:52:31 +08:00
Jin Cheng
4cb6ccc6f6
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 16:52:31 +08:00
Jin Cheng
f15fe75f24
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 16:52:31 +08:00
Jin Cheng
15e0c748e5
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2025-12-19 16:52:31 +08:00
Jin Cheng
70f82a5607
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2025-12-19 16:52:31 +08:00
Jin Cheng
5b7c17cfc7
fix(bt/bluedroid): reject device with same address in legacy paring
2025-12-19 16:52:31 +08:00
Jin Cheng
0fc2109ec7
fix(bt/bluedroid): ignore AVCT commands that are too long
2025-12-19 16:52:31 +08:00
Jin Cheng
9095d1cd25
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2025-12-19 16:52:31 +08:00
Jin Cheng
0f1c203e12
fix(bt/bluedroid): make sure SDP only start discovery once
2025-12-19 16:52:31 +08:00
Jin Cheng
1ba8aaaff8
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2025-12-19 16:52:31 +08:00
Jin Cheng
33af3a0aa6
fix(bt/blurdoird): check Classic key before cross-key derivation
2025-12-19 16:52:31 +08:00
Jin Cheng
e7e0be698a
fix(bt/blurdoird): enable bitpool snity checks
2025-12-19 16:52:31 +08:00
nilesh.kale
88fe9e436d
fix(esp_https_ota): align OTA resumption offset to 16-byte boundary
2025-12-18 19:09:56 +08:00
nilesh.kale
943b853746
Revert "fix: add check to ensure OTA buffer size for 16-byte aligned"
...
This reverts commit 873fd18c5a .
2025-12-18 19:09:56 +08:00
Zhou Xiao
7e93257ed1
fix(ble): added missed spin lock initialization
...
(cherry picked from commit 069262e513 )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2025-12-18 17:13:38 +08:00
zhuanghang
5d8104a6a2
feat(802.15.4): Update the 'ieee802154_get_recent_rssi' API to obtain real-time RSSI
2025-12-18 16:34:42 +08:00
Jiang Jiang Jian
e0577ae677
Merge branch 'fix/fix_esp32s2_phy_issue_v55' into 'release/v5.5'
...
fix(phy): fix esp32s2 phy lib issue v55
See merge request espressif/esp-idf!44341
2025-12-18 15:48:01 +08:00
Island
8789584388
Merge branch 'bugfix/bug_ble_max_device_record_v5.5' into 'release/v5.5'
...
fix(ble/bluedroid): Fixed BLE incorrect device record count issue (v5.5)
See merge request espressif/esp-idf!43597
2025-12-18 14:29:52 +08:00
Island
a63ae743b1
Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.5' into 'release/v5.5'
...
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.5)
See merge request espressif/esp-idf!44251
2025-12-18 14:26:44 +08:00
Island
5cf7ec68bc
Merge branch 'bugfix/fix_ble_security_issue_2025_v5.5' into 'release/v5.5'
...
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.5)
See merge request espressif/esp-idf!43807
2025-12-18 14:25:15 +08:00
Island
51493f9445
Merge branch 'bugfix/fix_reattempt_sync_estab_v5.5' into 'release/v5.5'
...
fix(nimble): Add change to cancel sync in case of reattempt (v5.5)
See merge request espressif/esp-idf!43949
2025-12-18 14:21:18 +08:00
Jiang Jiang Jian
f230471ee6
Merge branch 'bugfix/fix_esp32_coex_cache_disable_crash_v5.5' into 'release/v5.5'
...
fix(coex): fix esp32 coex crash issue v5.5
See merge request espressif/esp-idf!44288
2025-12-18 14:05:52 +08:00
Jiang Jiang Jian
2a039e30d4
Merge branch 'bugfix/fix_bt_4205_v5.5' into 'release/v5.5'
...
Fixed BLE assert lld_con.c 1479 on ESP32-C3 and ESP32-S3(5106725) (v5.5)
See merge request espressif/esp-idf!44328
2025-12-18 13:59:23 +08:00
wangtao@espressif.com
c8ba727536
fix(phy): fix esp32s2 phy lib issue
2025-12-17 20:36:28 +08:00